| name | ns-launch-audit |
| description | Perform a read-only NowStack Mobile launch audit across product, web, iOS, Android, backend, auth, payments, email, storage, analytics, stores, and operations. Returns an evidence-backed GO or NO-GO verdict. |
Launch Audit - NowStack Mobile
Issue a fail-closed launch verdict without editing code, installing tools, deploying, uploading, submitting, or changing provider state.
<audit_matrix>
- Product/config: placeholders, legal/support URLs, shared config mirrors, version ownership.
- Backend: Convex compile, schema/index/auth boundaries, production env verifiability.
- Web: production build, SSR routes, auth gates, legal pages,
/app, /admin.
- iOS: run
ns-ios-audit; verify exact TestFlight build and App Review readiness.
- Android: verify exact internal build, package/account/track, listing and compliance readiness.
- Auth: provider parity, production-specific OAuth, private reviewer credentials, account deletion.
- Money/data: Apple IAP, Stripe live objects/webhook, R2 target/public exposure, email delivery.
- Analytics/privacy: consent, PII policy, dev/prod separation, store declarations.
- Operations: release rollback/monitoring/support ownership and credential rotation.
</audit_matrix>
Run `ns-check-setup` in development, accounts, and production modes. Use `ns-verify --read-only` for existing runtimes; never invoke `npx convex dev --once` from this audit. Read provider state only when credentials are already available. Mark inaccessible state `NOT VERIFIABLE`.
`GO` requires zero blockers and zero required unknowns. Output blockers, warnings, manual gates, verified strengths, and the shortest ordered remediation path with owner skills. Never repair findings inside this read-only skill.
